

However, memory writes are not always performed at the rigth memory addresses.Īn attacker can therefore trigger a memory corruption of zlib, via deflateInit2_(), in order to trigger a denial of service, and possibly to run code.įull bulletin, software filtering, emails, fixes.

The zlib product allocates memory for its internal processing. Impacted products: ACOS, Kafka, Mac OS X, Debian, BIG-IP Hardware, TMOS, Fedora, FreeBSD, AIX, IBM i, QRadar SIEM, SPSS Statistics, Tivoli Storage Manager, WebSphere MQ, PowerCenter, Junos Space, Junos Space Network Management Platform, McAfee Email Gateway, McAfee Web Gateway, MySQL Community, MySQL Enterprise Server, SnapCenter, OpenBSD, openSUSE Leap, Oracle AS, Oracle Communications, Oracle DB, Oracle Fusion Middleware, Oracle Identity Management, Oracle OIT, Solaris, WebLogic, Percona Server for MySQL, PHP, Python, RHEL, SIMATIC, Skyhigh SWG, Splunk Enterprise, SUSE Linux Enterprise Desktop, SLES, Synology DSM, Synology DS***, Synology RS***, Nessus ~ precise, Ubuntu, zlib. Vulnerability of zlib: memory corruption via deflateInit2_() Synthesis of the vulnerabilityĪn attacker can trigger a memory corruption of zlib, via deflateInit2_(), in order to trigger a denial of service, and possibly to run code.
